|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
[sec-adv] Pablo FTP Server Username and Password Disclosure Vulnerability
From: Secunia Security Advisories (sec-adv
secunia.com)
Date: Wed Jun 04 2003 - 02:38:43 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
TITLE:
Pablo FTP Server Username and Password Disclosure Vulnerability
READ ONLINE:
http://www.secunia.com/advisories/8937/
CRITICAL:
Less critical
IMPACT:
Exposure of sensitive information
WHERE:
Local system
SOFTWARE:
Pablo FTP Server 1.x
DESCRIPTION:
A vulnerability has been identified in Pablo FTP Server, which allows
malicious, local users to gain knowledge of usernames and passwords.
The problem is that usernames and passwords are stored in plain text
in the file "users.dat", which can be read by any user.
The vulnerability has been reported in version 1.2. However, prior
versions may also be affected.
SOLUTION:
Change permissions on "users.dat" allowing only authorised users to
read the contents.
REPORTED BY / CREDITS:
JeiAr of GulfTech Computers
ORIGINAL ADVISORY:
http://www.gulftech.org/vuln/Vulnerabilities%20In%20Pablo%20Software%20Solutions%20FTP%20Service%201.2.txt
----------------------------------------------------------------------
Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419
----------------------------------------------------------------------
Unsubscribe: Secunia Security Advisories
----------------------------------------------------------------------
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]